Tracecat

Tracecat is an open source alternative to proprietary security orchestration, automation and response (SOAR) platforms like Tines and Splunk SOAR. It empowers security engineers to automate their workflows and playbooks without restrictions.

Key features:

• Unlimited workflows: Build, reuse and scale security playbooks without limits using the visual drag-and-drop builder or YAML configuration.
• Low-code integrations: Use pre-built integrations or easily create custom ones to connect your security tools.
• Self-hostable: Deploy Tracecat in your own environment using Docker, Kubernetes or AWS Fargate for maximum control and data privacy.
• Open source: Fully open source and built on Temporal, the same durable execution engine used by major tech companies.
• Enterprise-ready: Offers mission-critical alerting and 99.99% uptime SLAs for organizations that need guaranteed reliability.

Tracecat allows security teams to automate alert triage, threat enrichment, incident response and more. The platform scales to handle high volumes of workflows in parallel across isolated tenants. With both no-code and code-based options, it provides flexibility for teams of all technical levels.

By offering an open source alternative to proprietary SOAR tools, Tracecat aims to make powerful security automation accessible to more organizations. The self-hosted deployment model ensures sensitive security data and workflows remain under your control.